#1)创建两种认证方式SCRAM-SHA-512,SCRAM-SHA-256,本文档使用此方法#admin用户需要在kafka启动前创建,切记/usr/local/kafka_2.13-3.2.3/bin/kafka-configs.sh --zookeeper 10.255.61.28:2181,10.255.61.29:2181,10.255.61.30:2181 --alter --add-config'SCRAM-SHA-256=[password=admin-sec],SCRAM-SHA-512=[pa...
bin\windows\kafka-configs.bat--zookeeper localhost:2181--alter--add-configSCRAM-SHA-256=[iterations=8192,password=alice-secret],SCRAM-SHA-512=[password=alice-secret]--entity-type users--entity-name alice bin\windows\kafka-configs.bat--zookeeper127.0.0.1:2181--alter--add-configSCRAM-SHA-256=[p...
#获取zk连接信息zk_conn=$(awk -F= '/^zookeeper.connect=/ {print $2}' /app/kafka/config/server.properties)#添加集群所需的用户cd /app/kafka/bin ./kafka-configs.sh --zookeeper ${zk_conn} --alter --add-config 'SCRAM-SHA-512=[iterations=8192,password=admin-secret]' --entity-type users...
security.protocol=SASL_PLAINTEXT sasl.mechanism=SCRAM-SHA-512 sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule required username="kafka-acntgcoin9" password="acntgcozqb"; 5.3.1、multi 【单partition/单副本】 创建topic:【12 partition、1 replica、acks=1】 通过命令创建topic,...
sasl.enabled.mechanisms=SCRAM-SHA-256 authorizer.class.name=kafka.security.authorizer.AclAuthorizer allow.everyone.if.no.acl.found=false super.users=User:admin authorizer.class.name开启 ACL 授权机制并指定实现类; allow.everyone.if.no.acl.found如果没有找到ACL(访问控制列表)配置,是否允许任何操作;这里设...
复制一份kafka配置文件,添加scram相关配置项 cd ~/kafka_2.12-2.3.0/config cp server.properties scram.properties vim scram.properties # 新增如下内容: # Protocol listeners=SASL_PLAINTEXT://localhost:9092 security.inter.broker.protocol=SASL_PLAINTEXT sasl.mechanism.inter.broker.protocol=SCRAM-SHA-256 sas...
sasl.mechanism.inter.broker.protocol=SCRAM-SHA-256:设置用于内部 broker 通信的身份验证机制为 SCRAM-SHA-256。 sasl.enabled.mechanisms=SCRAM-SHA-256:启用 SCRAM-SHA-256 身份验证机制。 sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule required username="${SASL_USERNAME}" password...
5.4. 创建 SCRAM 用户 在启动 Kafka 之前需要先创建好用户,在 bin 目录下执行以下内容: 分别创建admin(超级管理员) 和test(客户端用户) ./kafka-configs.sh --zookeeper localhost:2181 --alter --add-config'SCRAM-SHA-256=[password=admin]'--entity-typeusers--entity-name admin ...
sasl.mechanism=SCRAM-SHA-512 sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule required username="writer" password="writer-pwd"; 1. 2. 3. 给writer写的权限: ./kafka-acls.sh --authorizer kafka.security.auth.SimpleAclAuthorizer --authorizer-properties zookeeper.connect=192.168...
sasl.enabled.mechanisms=SCRAM-SHA-256 authorizer.class.name=kafka.security.authorizer.AclAuthorizer allow.everyone.if.no.acl.found=false super.users=User:admin authorizer.class.name开启 ACL 授权机制并指定实现类; allow.everyone.if.no.acl.found如果没有找到ACL(访问控制列表)配置,是否允许任何操作;这里设...